This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/mscwxPZcPbLJOKy1J-8IvjK-dMA.roa File: mscwxPZcPbLJOKy1J-8IvjK-dMA.roa (raw, json) Hash identifier: SehCRKbcK0pMfEDJLBg+4FVLJTa+tBwqRk0UywbNktM= Subject key identifier: 9A:C7:30:C4:F6:5C:3D:B2:C9:38:AC:B5:27:EF:08:BE:32:BE:74:C0 Certificate issuer: /CN=227e9581a69acf8119320e1379857a513bd238db Certificate serial: 019B7B36C47002B6626C99BE5C56F54FC35D Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/mscwxPZcPbLJOKy1J-8IvjK-dMA.roa Signing time: Thu 01 Jan 2026 20:19:05 +0000 ROA not before: Thu 01 Jan 2026 20:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199324 IP address blocks: 80.83.170.0/24 maxlen: 24 185.21.24.0/22 maxlen: 24 185.187.40.0/22 maxlen: 24 2a00:54e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c4:70:02:b6:62:6c:99:be:5c:56:f5:4f:c3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=227e9581a69acf8119320e1379857a513bd238db Validity Not Before: Jan 1 20:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ac730c4f65c3db2c938acb527ef08be32be74c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:78:a1:ec:b7:ce:7a:83:7b:cc:bb:cb:41: aa:8a:6b:25:9e:29:e1:a1:9c:db:5a:8a:b5:3a:2b: b9:92:46:c9:f1:1c:f0:b9:7f:00:60:4b:aa:5b:e6: c0:ea:15:fb:b2:f0:a6:38:07:b3:37:02:d9:54:ec: 6f:ee:2c:89:c3:63:48:d0:26:8e:04:43:fb:72:5f: 8e:cb:72:0e:1a:09:cf:92:cf:68:c0:b3:b1:f4:0b: 2f:34:c8:3c:16:81:b9:f9:8e:a3:fb:18:53:58:c2: 62:07:72:fc:f3:bb:52:f5:b8:3d:99:06:a4:a1:a1: 6a:56:91:69:55:77:93:54:ef:75:29:5a:92:9a:de: 21:e4:d9:60:1a:22:82:1b:5b:88:75:b7:dc:76:7d: 11:32:a1:b3:2f:80:44:65:a0:55:38:f7:44:5f:f1: b8:6e:1c:2a:0d:e0:ce:a3:ea:0f:c9:b4:25:a4:56: 5f:9a:5a:d3:72:6c:ee:8c:7c:7c:db:c7:e4:bc:f9: b9:fd:ba:da:4d:1c:0c:9d:ac:fb:69:b1:49:18:e8: bc:f8:2d:4b:4e:84:f6:59:f0:24:61:f7:68:ae:8b: d9:1b:9f:34:05:d4:6c:f8:e0:d1:7f:83:5b:22:b5: 2f:3d:d9:30:a2:26:36:6a:af:a1:3f:36:c7:16:e7: 78:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C7:30:C4:F6:5C:3D:B2:C9:38:AC:B5:27:EF:08:BE:32:BE:74:C0 X509v3 Authority Key Identifier: keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/mscwxPZcPbLJOKy1J-8IvjK-dMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.83.170.0/24 185.21.24.0/22 185.187.40.0/22 IPv6: 2a00:54e0::/32 Signature Algorithm: sha256WithRSAEncryption 5f:a1:2c:04:8e:0f:de:e3:3e:64:b2:5b:ad:a5:9a:ff:7a:8d: c1:b7:ab:55:24:b1:00:9d:fb:ff:bf:83:ae:2f:e2:68:dc:85: 79:38:9b:84:2d:f5:91:44:7a:2a:cf:72:ae:82:82:93:bf:b2: 14:26:5a:fd:97:0f:05:c8:a0:76:53:68:2a:20:0c:1a:67:87: d3:ef:b3:a1:c6:8a:51:d0:31:7a:2a:2d:f1:d2:c0:5e:15:10: 02:43:fb:52:45:91:88:97:57:f6:67:15:26:dc:b3:68:e7:24: 9d:99:0a:89:5a:00:7e:18:6c:64:bc:50:f5:1a:fa:f3:d6:22: 56:5d:45:39:c6:91:a4:bb:1e:1c:da:96:4a:7b:cc:f3:95:2d: 8b:2e:c2:34:a8:88:b3:8c:39:0e:0e:fc:3c:e6:12:a0:99:2b: bc:36:2d:4a:7f:a6:7c:7a:8a:82:8e:70:10:fd:9c:26:63:78: ea:27:f7:85:1b:a1:a6:62:ce:22:e8:6b:0f:40:e2:5d:61:a7: 18:7b:0b:fe:31:fc:4f:77:ba:a5:cb:94:49:11:81:94:e9:0c: f4:41:dd:a0:36:a2:70:33:3e:6a:06:4b:b4:44:20:59:e4:b5: fd:72:db:04:c6:65:fb:d4:2c:21:b1:8b:15:5d:25:97:e7:0c: 5f:df:41:0f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7NsRwArZibJm+XFb1T8NdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyN2U5NTgxYTY5YWNmODExOTMyMGUxMzc5ODU3YTUxM2Jk MjM4ZGIwHhcNMjYwMTAxMjAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWM3MzBjNGY2NWMzZGIyYzkzOGFjYjUyN2VmMDhiZTMyYmU3NGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT14oey3znqDe8y7y0Gqimslninh oZzbWoq1Oiu5kkbJ8RzwuX8AYEuqW+bA6hX7svCmOAezNwLZVOxv7iyJw2NI0CaO BEP7cl+Oy3IOGgnPks9owLOx9AsvNMg8FoG5+Y6j+xhTWMJiB3L887tS9bg9mQak oaFqVpFpVXeTVO91KVqSmt4h5NlgGiKCG1uIdbfcdn0RMqGzL4BEZaBVOPdEX/G4 bhwqDeDOo+oPybQlpFZfmlrTcmzujHx828fkvPm5/braTRwMnaz7abFJGOi8+C1L ToT2WfAkYfdorovZG580BdRs+ODRf4NbIrUvPdkwoiY2aq+hPzbHFud4SQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFJrHMMT2XD2yyTistSfvCL4yvnTAMB8GA1UdIwQY MBaAFCJ+lYGmms+BGTIOE3mFelE70jjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yYjgzYTEtNzQ4ZC00ZjU1LThiM2It ZDlkZjQ1ZGJiYWRmLzEvbXNjd3hQWmNQYkxKT0t5MUotOEl2akstZE1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yYjgzYTEtNzQ4ZC00ZjU1LThiM2ItZDlkZjQ1ZGJiYWRm LzEvSW42VmdhYWF6NEVaTWc0VGVZVjZVVHZTT05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAUFOqAwQC uRUYAwQCubsoMA0EAgACMAcDBQAqAFTgMA0GCSqGSIb3DQEBCwUAA4IBAQBfoSwE jg/e4z5kslutpZr/eo3Bt6tVJLEAnfv/v4OuL+Jo3IV5OJuELfWRRHoqz3KugoKT v7IUJlr9lw8FyKB2U2gqIAwaZ4fT77OhxopR0DF6Ki3x0sBeFRACQ/tSRZGIl1f2 ZxUm3LNo5ySdmQqJWgB+GGxkvFD1Gvrz1iJWXUU5xpGkux4c2pZKe8zzlS2LLsI0 qIizjDkODvw85hKgmSu8Ni1Kf6Z8eoqCjnAQ/ZwmY3jqJ/eFG6GmYs4i6GsPQOJd YacYewv+MfxPd7qly5RJEYGU6Qz0Qd2gNqJwMz5qBku0RCBZ5LX9ctsExmX71Cwh sYsVXSWX5wxf30EP -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:33 2026 by rpki-client